Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
File: a7027107-6e94-30b6-8510-73e3051693e9.roa (raw, json)
Hash identifier: Jq4Cw70uhq90OwExZHIP0kHIQkiZODjGkF3efdKlup4=
Subject key identifier: AF:54:93:21:92:14:36:35:03:68:95:6D:64:0A:6B:78:88:D0:50:A0
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F43285847FF4A4EA8B911BF239AB65980
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 209242
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4e:a8:b9:11:bf:23:9a:b6:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=1401e2ee-fd4c-4786-82ad-224ff5aee65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:d6:90:7f:6a:d3:4f:79:0f:7b:71:01:1b:
dd:df:57:f2:a2:bb:e1:86:37:d6:61:3e:52:65:9a:
63:bb:3f:06:2f:53:90:4a:72:83:68:04:d8:6d:c4:
b5:f0:2f:2c:5c:08:d0:f0:6f:7e:bd:93:55:aa:75:
d8:38:9d:e3:df:95:b2:86:80:2f:7f:74:aa:fb:52:
47:fe:95:35:93:e2:cb:8f:8d:72:0b:0f:e3:63:05:
51:13:dc:21:5f:a9:06:01:9f:2a:07:03:4f:32:a8:
20:50:fe:5a:29:5f:15:91:3a:69:fa:f1:5f:db:f5:
8f:87:a0:91:e8:1e:99:59:5f:06:b3:33:bf:f9:66:
f9:fd:6b:02:fb:0c:b9:df:2f:41:68:79:15:0f:76:
89:eb:58:7b:92:ce:c2:14:81:f7:88:87:44:14:82:
90:09:e7:0c:dc:c8:4b:95:ec:10:13:5b:50:bf:43:
e0:4d:14:b4:e6:41:c5:81:ff:75:3e:97:d9:ff:0c:
2e:cc:57:76:42:ae:fc:ba:62:0a:b8:35:80:a2:7c:
56:ae:ce:97:82:34:65:e9:6c:c9:bb:df:56:a4:d5:
f8:9f:ea:87:08:e0:de:d1:6f:da:6b:b0:9a:2e:04:
75:f7:d7:99:ce:a3:e8:dd:f9:0a:f6:8a:c3:67:84:
62:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:54:93:21:92:14:36:35:03:68:95:6D:64:0A:6B:78:88:D0:50:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a7027107-6e94-30b6-8510-73e3051693e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:70:60:91:4d:09:49:1a:2d:b7:e5:3e:d6:7d:dd:b9:18:af:
94:d0:3f:d2:94:59:17:2f:65:f9:3f:40:9b:d4:64:fb:e1:38:
8c:5b:64:ee:67:0d:7e:a2:55:f7:16:07:43:2f:55:c0:ff:b7:
71:ec:d6:79:99:b4:dd:54:13:3c:0e:3c:33:24:f4:4c:9c:ad:
f1:be:9a:a7:36:f9:c5:4d:b5:01:e2:d6:98:13:78:b8:cc:8d:
b1:ff:bd:fe:90:84:65:d9:4f:84:b1:f2:be:a0:a0:ad:25:8c:
d7:91:55:3b:8a:36:d3:b0:32:dc:48:3b:38:35:58:c9:dc:65:
78:d5:63:8f:cb:6f:33:a8:24:e1:21:ae:43:b8:10:ee:4a:27:
6c:a7:1a:f4:94:17:a4:95:31:80:d3:72:71:20:8d:9c:cd:45:
29:29:ea:b0:bd:6c:74:b3:97:5f:9a:db:dd:5d:0a:3b:34:00:
a8:4b:fb:e2:b9:e0:87:cd:c8:cc:af:41:75:b9:59:5d:87:ba:
3c:4c:0d:08:da:d4:cc:4a:80:28:bf:a5:48:d7:3f:88:94:6c:
97:9b:8d:98:a3:7a:9f:46:a3:c8:14:81:3a:9c:61:19:03:53:
26:af:17:4f:8b:8b:96:37:ab:46:7b:bb:c7:59:24:69:7f:fd:
1f:6f:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:26 2025 by rpki-client